fn le2qModQ(x: u32) u32
fn le2qModQ(x: u32) u32 { const r = x -% Q; const mask = signMask(u32, r); return r +% (mask & Q); }